build(deps): bump github/gh-aw from 0.74.8 to 0.76.1 in the github-actions group across 1 directory

[dependabot]

Bumps the github-actions group with 1 update in the / directory: github/gh-aw.

Updates github/gh-aw from 0.74.8 to 0.76.1

Release notes

Sourced from github/gh-aw's releases.

v0.76.1

🌟 Release Highlights

This release brings a new replay command for timeline log visualization, inline skill support, improved safe-outputs reliability, and Codex model updates.

✨ What's New

• replay command — Render and stream unified timeline logs directly in your terminal for faster post-run analysis (#34835)
• Inline skill extraction/runtime — Define and run skills inline within workflows, mirroring the inline sub-agent syntax for a more consistent authoring experience (#34874)
• Codex default model updated to gpt-5.4 — Workflows using Codex now use the latest model by default; lockfiles have been regenerated (#34804)
• tracker-id frontmatter documented — The tracker-id field is now fully documented in the reference, making it easier to correlate workflow runs with external tracking systems (#34799)

🐛 Bug Fixes & Improvements

• safe-outputs push_to_pull_request_branch — Documented as append-only and now auto-linearizes merge commits before a signed push, preventing push failures on branches with merge history (#34834)
• Codex threat-detection — Response-event logs from Codex are now correctly parsed in threat-detection result processing (#34850)
• Step name alignment stabilized — Direct manifest reads are now permitted and agent guidance tightened to prevent step name drift (#34873)
• Reduced duplicate frontmatter scanning — ParseWorkflow no longer scans frontmatter twice, improving compilation performance (#34819)
• Build & test reliability — Integration-tagged builds and CGO fuzz jobs now correctly share test helpers, eliminating spurious CI failures (#34841, #34816)

---

For complete details, see CHANGELOG.

Generated by 🚀 Release · sonnet46 838.6K

---

What's Changed

• Enforce //go:build !integration on untagged unit test files by @​Copilot in github/gh-aw#34798
• doc: document tracker-id frontmatter field in main reference by @​Copilot in github/gh-aw#34799
• Set Codex default fallback model to gpt-5.4 and regenerate lockfiles by @​Copilot in github/gh-aw#34804
• Fix CGO fuzz job compile failure by exposing shared test helpers to integration-tagged builds by @​Copilot in github/gh-aw#34816
• Fix failing unit test: align Metrics Trends row labels with test expectations by @​Copilot in github/gh-aw#34833
• Reduce duplicate frontmatter scanning in ParseWorkflow by @​Copilot in github/gh-aw#34819
• Fix integration-tag test build by making initTestGitRepo helper available to all test variants by @​Copilot in github/gh-aw#34841
• [compiler-threat-spec] chore(spec): daily threat spec optimizer 2026-05-26 — bump to v1.0.12 by @​github-actions[bot] in github/gh-aw#34845
• [community] Update community contributions in README by @​github-actions[bot] in github/gh-aw#34846
• Route Antigravity AWF target through Gemini provider key by @​Copilot in github/gh-aw#34839
• Handle Codex response-event logs in threat-detection result parsing by @​Copilot in github/gh-aw#34850
• fix(safe-outputs): document push_to_pull_request_branch as append-only; auto-linearize merge commits before signed push by @​Copilot in github/gh-aw#34834
• feat: add replay command for rendering unified timeline logs by @​Copilot in github/gh-aw#34835
• [code-simplifier] Reuse gatewayTimestampToTime in agentEntryToTimelineEvent by @​github-actions[bot] in github/gh-aw#34864
• Stabilize Step Name Alignment by permitting direct manifest reads and tightening agent guidance by @​Copilot in github/gh-aw#34873
• [jsweep] Clean add_comment.cjs by @​github-actions[bot] in github/gh-aw#34866
• Add inline skill extraction/runtime support mirroring inline sub-agents by @​Copilot in github/gh-aw#34874

Full Changelog: github/gh-aw@v0.76.0...v0.76.1

... (truncated)

Commits

• 58d1bed Add inline skill extraction/runtime support mirroring inline sub-agents (#34874)
• ccf77c4 jsweep: clean add_comment.cjs (#34866)
• cc2e15f Stabilize Step Name Alignment by permitting direct manifest reads and tighten...
• 1aa3c80 refactor: reuse gatewayTimestampToTime in agentEntryToTimelineEvent (#34864)
• acaccd7 feat: add replay command for rendering unified timeline logs (#34835)
• 796f583 fix(safe-outputs): document push_to_pull_request_branch as append-only; auto-...
• 56207e9 Handle Codex response-event logs in threat-detection result parsing (#34850)
• 88fa3ba Route Antigravity AWF target through Gemini provider key (#34839)
• c948db9 [community] Update community contributions in README (#34846)
• cdbeed6 chore(spec): daily threat spec optimizer 2026-05-26 — bump to 1.0.12 (#34845)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions